Microsoft Windows 10 1809 vulnerabilities

CVE-2026-69357 [HIGH] CWE-416 CVE-2026-69357: Use after free in Windows NDIS allows an authorized attacker to elevate privileges over a network. Use after free in Windows NDIS allows an authorized attacker to elevate privileges over a network.

CVE-2026-69274 [HIGH] CWE-416 CVE-2026-69274: Use after free in Windows Win32K allows an authorized attacker to elevate privileges over a network. Use after free in Windows Win32K allows an authorized attacker to elevate privileges over a network.

CVE-2026-69314 [HIGH] CWE-416 CVE-2026-69314: Use after free in Windows Device Association Broker service allows an authorized attacker to elevate Use after free in Windows Device Association Broker service allows an authorized attacker to elevate privileges over a network.

CVE-2026-69460 [HIGH] CWE-416 CVE-2026-69460: Use after free in Windows Modern Device Management (MDM) allows an authorized attacker to elevate pr Use after free in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges over a network.

CVE-2026-83911 [HIGH] CWE-122 CVE-2026-83911: Heap-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges lo Heap-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally.

CVE-2026-100225 [HIGH] CWE-122 CVE-2026-100225: Heap-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges lo Heap-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally.

CVE-2026-100216 [HIGH] CWE-121 CVE-2026-100216: Stack-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges l Stack-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally.

CVE-2026-70573 [HIGH] CWE-20 CVE-2026-70573: Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate pri Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

CVE-2026-83827 [HIGH] CWE-122 CVE-2026-83827: Heap-based buffer overflow in Windows Bluetooth Port Driver allows an authorized attacker to elevate Heap-based buffer overflow in Windows Bluetooth Port Driver allows an authorized attacker to elevate privileges locally.

CVE-2026-83708 [HIGH] CWE-121 CVE-2026-83708: Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.

CVE-2026-69468 [HIGH] CWE-122 CVE-2026-69468: Heap-based buffer overflow in Windows Volume Manager Extension Driver allows an authorized attacker Heap-based buffer overflow in Windows Volume Manager Extension Driver allows an authorized attacker to elevate privileges locally.

CVE-2026-50472 [HIGH] CWE-122 CVE-2026-50472: Heap-based buffer overflow in Windows LUAFV allows an authorized attacker to elevate privileges loca Heap-based buffer overflow in Windows LUAFV allows an authorized attacker to elevate privileges locally.

CVE-2025-26635 [MEDIUM] CWE-1390 CVE-2025-26635: Weak authentication in Windows Hello allows an authorized attacker to bypass a security feature over Weak authentication in Windows Hello allows an authorized attacker to bypass a security feature over a network.

CVE-2026-69415 [MEDIUM] CWE-306 CVE-2026-69415: Missing authentication for critical function in Windows DHCP Server allows an authorized attacker to Missing authentication for critical function in Windows DHCP Server allows an authorized attacker to elevate privileges over a network.

CVE-2023-35387 [HIGH] CWE-191 CVE-2023-35387: Windows Bluetooth A2DP driver Elevation of Privilege Vulnerability Windows Bluetooth A2DP driver Elevation of Privilege Vulnerability

CVE-2024-21371 [HIGH] CWE-367 CVE-2024-21371: Windows Kernel Elevation of Privilege Vulnerability Windows Kernel Elevation of Privilege Vulnerability

CVE-2025-27473 [HIGH] CWE-400 CVE-2025-27473: Uncontrolled resource consumption in Windows HTTP.sys allows an unauthorized attacker to deny servic Uncontrolled resource consumption in Windows HTTP.sys allows an unauthorized attacker to deny service over a network.

CVE-2024-38064 [HIGH] CWE-908 CVE-2024-38064: Windows TCP/IP Information Disclosure Vulnerability Windows TCP/IP Information Disclosure Vulnerability

CVE-2024-29050 [HIGH] CWE-197 CVE-2024-29050: Windows Cryptographic Services Remote Code Execution Vulnerability Windows Cryptographic Services Remote Code Execution Vulnerability

CVE-2024-49076 [HIGH] CWE-287 CVE-2024-49076: Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability